Iran-linked Cyber Attacks

This report summarizes ongoing Iran-linked cyber activity that is actively exploiting numerous critical vulnerabilities (multiple CVEs listed) to gain initial access to internet-facing and edge infrastructure, conduct phishing, DDoS, data exfiltration, and destructive operations, with emphasis on opportunistic exploitation of unpatched systems across government, critical infrastructure, and enterprises.